Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked ...

A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...

Node-forge cryptography library flaw (CVE-2025-12816) allowed bypass of signature and certificate validation CERT-CC warns of risks including authentication bypass and signed data tampering ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...